The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the walkdownproc function in the btrfs component of the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the vsock component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the vsock component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

UBUNTU-CVE-2025-24031

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

CVE-2022-1543

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server...

The vulnerability of the imagination AI image and video generation generator, related to server blocking, allows a violator to trigger a service failure.

The vulnerability of the imagination AI image and video generation service is related to a server crash due to uncontrolled resource consumption during the processing of the api/stablestudio/generate endpoint. Exploiting this vulnerability could allow an attacker to cause a service outage by...

The vulnerability of the xen-netfront driver (drivers/net/xen-netfront.c) in Xen hypervisors for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the xen-netfront driver drivers/net/xen-netfront.c in Xen hypervisors for Linux operating systems is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the rte_raw_cksum_mbuf() function in the vhost library, part of the libraries and drivers for fast packet processing by DPDK, allows a attacker to cause a service failure.

The vulnerability of the rterawcksummbuf function in the vhost library, which is part of the DPDK toolkit for fast packet processing, stems from a failure to properly manage the output beyond the buffer in memory when calculating the checksum. Exploiting this vulnerability could allow an attacker...

The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to trigger a service failure.

The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the implementation of the Simple Network Management Protocol (SNMP) for microprogrammable network interface controllers in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for microprogrammable network interface controllers in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to incorrect processing of additional values. Exploiting this...

CVE-2024-21281

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.7.0.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise...

The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values, which allows a perpetrator to cause a service failure.

The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted traffi...

CVE-2024-39540

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When an affected device receives specif...

bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes. Exploiting this vulnerability could allow a attacker to cause a service failure...

AZL-49936 CVE-2024-21096 affecting package mariadb for versions less than 10.11.10-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to...

OESA-2024-1362 telnet security update

Telnet is an application protocol used on the Internet or local area network to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection. The package includes a remote login client program for telnet and a server daemon. Security Fixes: telnetd ...

The vulnerability of the network communication library of the software-hardware systems for Siemens Fire Safety products, namely Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile, allows a perpetrator to cause service interruptions.

The vulnerability of the network communication library of the Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile fire safety systems relates to the issue where the operation data escapes from the buffer in memory during the analysis of X.509 certificates. Exploiting this vulnerability could...

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service interruptions...

Not everything has to be a massive, global cyber attack

Some of my Webex rooms recently have been blowing up with memes about blaming Canada or wild speculation that a state-sponsored actor is carrying out some sort of major campaign. After a widespread outage of cellular service with AT&T and other carriers a few weeks ago, people were sure it was so...